npm better-auth 1.7.24
v1.7.24

one hour ago

Important

Action required

  • If you accept DPoP-bound tokens, call enforceDpopBinding from better-auth/oauth2 in your endpoint with the request and a shared replay store. (#12498)

better-auth

Bug Fixes

  • Improved verification lookups to delete expired rows at most once a minute per server instance instead of on every lookup (#12593)

For detailed changes, see CHANGELOG

@better-auth/oauth-provider

Bug Fixes

  • Clarified that requireActiveAccessToken checks only the token and does not enforce DPoP binding (#12498)
  • Fixed plugin hook and endpoint errors turning into generic 500 responses when an app installs more than one copy of better-call (#12503)
  • Fixed official packages to accept any better-call 1.4 patch release from 1.4.5 as a peer, so plugins share one copy (#12502)
  • Fixed OAuth provider discovery to stop advertising endpoint URLs with a double slash when baseURL ends in / (#12598)

For detailed changes, see CHANGELOG

@better-auth/cimd

Bug Fixes

  • Fixed plugin hook and endpoint errors turning into generic 500 responses when an app installs more than one copy of better-call (#12503)
  • Fixed official packages to accept any better-call 1.4 patch release from 1.4.5 as a peer, so plugins share one copy (#12502)

For detailed changes, see CHANGELOG

@better-auth/passkey

Bug Fixes

  • Fixed plugin hook and endpoint errors turning into generic 500 responses when an app installs more than one copy of better-call (#12503)
  • Fixed official packages to accept any better-call 1.4 patch release from 1.4.5 as a peer, so plugins share one copy (#12502)

For detailed changes, see CHANGELOG

@better-auth/scim

Bug Fixes

  • Fixed plugin hook and endpoint errors turning into generic 500 responses when an app installs more than one copy of better-call (#12503)
  • Fixed official packages to accept any better-call 1.4 patch release from 1.4.5 as a peer, so plugins share one copy (#12502)

For detailed changes, see CHANGELOG

@better-auth/sso

Bug Fixes

  • Fixed plugin hook and endpoint errors turning into generic 500 responses when an app installs more than one copy of better-call (#12503)
  • Fixed official packages to accept any better-call 1.4 patch release from 1.4.5 as a peer, so plugins share one copy (#12502)

For detailed changes, see CHANGELOG

@better-auth/stripe

Bug Fixes

  • Fixed plugin hook and endpoint errors turning into generic 500 responses when an app installs more than one copy of better-call (#12503)
  • Fixed official packages to accept any better-call 1.4 patch release from 1.4.5 as a peer, so plugins share one copy (#12502)

For detailed changes, see CHANGELOG

@better-auth/api-key

Bug Fixes

  • Fixed official packages to accept any better-call 1.4 patch release from 1.4.5 as a peer, so plugins share one copy (#12502)

For detailed changes, see CHANGELOG

@better-auth/core

Bug Fixes

  • Fixed official packages to accept any better-call 1.4 patch release from 1.4.5 as a peer, so plugins share one copy (#12502)

For detailed changes, see CHANGELOG

@better-auth/electron

Bug Fixes

  • Fixed official packages to accept any better-call 1.4 patch release from 1.4.5 as a peer, so plugins share one copy (#12502)

For detailed changes, see CHANGELOG

@better-auth/expo

Bug Fixes

  • Fixed @better-auth/expo to use the better-call copy installed by better-auth instead of adding a second copy to Expo apps (#12502)

For detailed changes, see CHANGELOG

@better-auth/mcp

Bug Fixes

  • Fixed official packages to accept any better-call 1.4 patch release from 1.4.5 as a peer, so plugins share one copy (#12502)

For detailed changes, see CHANGELOG

Contributors

Thanks to everyone who contributed to this release:

@gustavovalverde

Full changelog: v1.7.23...v1.7.24

Don't miss a new better-auth release

NewReleases is sending notifications on new releases.